More than 150 fake sources on the network are disguised as a Steam distribution service for computer games to steal the accounts of Russian gamers. socialbites.ca was informed about this in the information security company Group-IB.
According to experts, to “hijack” accounts, attackers use a new phishing technique called in-browser, which makes it difficult to detect a fake account. The technique allows you to create a pop-up fake browser window on a phishing resource, indistinguishable from the real one at first glance.
The victim is found by sending a message with a malicious link. The bait can be an offer to join an esports tournament, vote for one of the teams, or buy an in-game item in popular games (League of Legends, Counter-Strike, Dota 2, PUBG).
Experts also stated that the fake was done extremely well. For example, if data is entered incorrectly, the new phishing form will report a bug as “real” Steam. When the victim enables two-factor authentication, the fake source will also ask for a code in an additional window.
“Phishing sources using browser technology in the browser are dangerous even for experienced Steam users who follow basic cybersecurity rules,” said Alexander Kalinin, head of the Group-IB Information Security Incident Response Center.
Group-IB concluded that there are several ways to confirm that this is a fake window. The rogue version will not have a new window displayed in the taskbar. Also, the fake size cannot be enlarged or reduced, nor can it be expanded to full screen.
Earlier, experts analyzed the Steam game store’s statistics for July 2022 and solveWhich is the most popular graphics card among PC gamers.
Source: Gazeta
